General

  • Target

    x41.exe

  • Size

    35KB

  • MD5

    636d3d12a3c9611b4df1baef814f1937

  • SHA1

    9fd79501dd7419f27032201ac0173343a86af6d9

  • SHA256

    c0d8c191fdb7aaec5d70a84e10ea7c6c129631ccade69d067c9808f0cb5505b4

  • SHA512

    dd14650d53c6f968f1674c4bd9edc46a4a324b60393b8392708464a25012164bbae58fc1d11c750084e4539e2f40867accc74a93d679be47444a4add7627c1c9

  • SSDEEP

    384:yyqLXPCCbuGvSmKzJI9tTSULseo5qUB7u5C36gYt9ORtpkFTBLT29pZwoJzVvNVf:0LTXluB75qgDOFk9/8O/hG/jtYz

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

Mutex

XbGpURctYJoU1LTY

Attributes
  • Install_directory

    %Public%

  • install_file

    x41.exe

  • pastebin_url

    https://pastebin.com/raw/J09JweeH

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • x41.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections